【无标题】

 

 路由r1配置

<Huawei>
<Huawei>
<Huawei>u t m
Info: Current terminal monitor is off.
<Huawei>sy
Enter system view, return user view with Ctrl+Z.
[Huawei]sy r1
[r1]int g0/0/2
[r1-GigabitEthernet0/0/2]ip add    
[r1-GigabitEthernet0/0/2]ip address 192.168.1.254 24
[r1-GigabitEthernet0/0/2]int g0/0/0
[r1-GigabitEthernet0/0/0]ip add    
[r1-GigabitEthernet0/0/0]ip address 192.168.12.1 24

[r1]ip rou    
[r1]ip route
[r1]ip route-static 192.168.2.0 24 192.168.12.2
[r1]ip route-static 192.168.3.0 24 192.168.12.2
[r1]ip route-static 192.168.23.0 24 192.168.12.2
[r1]
<r1>sy
Enter system view, return user view with Ctrl+Z.
[r1]acl 3000
[r1-acl-adv-3000]ru    
[r1-acl-adv-3000]rule 10 p    
[r1-acl-adv-3000]rule 10 permit ?
  <1-255>  Protocol number
  gre      GRE tunneling(47)
  icmp     Internet Control Message Protocol(1)
  igmp     Internet Group Management Protocol(2)
  ip       Any IP protocol
  ipinip   IP in IP tunneling(4)
  ospf     OSPF routing protocol(89)
  tcp      Transmission Control Protocol (6)
  udp      User Datagram Protocol (17

[r1-acl-adv-3000]rule 10 permit tcp source 192.168.1.0 0.0.0.255 destination 192
.168.3.10 0.0.0.0 destination-port eq 80
 

<r1>sy
Enter system view, return user view with Ctrl+Z.
[r1]acl 3000
[r1-acl-adv-3000]ru    
[r1-acl-adv-3000]rule 20 p    
[r1-acl-adv-3000]rule 20 permit ip s    
[r1-acl-adv-3000]rule 20 permit ip source 192.168.1.0 0.0.0.255 de    
[r1-acl-adv-3000]rule 20 permit ip source 192.168.1.0 0.0.0.255 destination 192.
192.2.0 0.0.0.255
[r1-acl-adv-3000]ru    
[r1-acl-adv-3000]rule 30 d    
[r1-acl-adv-3000]rule 30 deny  ip s    
[r1-acl-adv-3000]rule 30 deny  ip source 192.168.1.0 0.0.0255 d    
[r1-acl-adv-3000]rule 30 deny  ip source 192.168.1.0 0.0.255 d    
[r1-acl-adv-3000]rule 30 deny  ip source 192.168.1.0 0.0.0.255 d    
[r1-acl-adv-3000]rule 30 deny  ip source 192.168.1.0 0.0.0.255 destination any
[r1-acl-adv-3000]
[r1-acl-adv-3000]q
[r1]q

[r1]int g0/0/2
[r1-GigabitEthernet0/0/2]tr    
[r1-GigabitEthernet0/0/2]traffic-filter in             
[r1-GigabitEthernet0/0/2]traffic-filter inbound acl 3000
[r1-GigabitEthernet0/0/2]

路由r2的配置

[Huawei]sy r2
[r2]int g0/0/0
[r2-GigabitEthernet0/0/0]ip add    
[r2-GigabitEthernet0/0/0]ip address 192.168.12.2 24
[r2-GigabitEthernet0/0/0]int g0/0/2
[r2-GigabitEthernet0/0/2]ip add    
[r2-GigabitEthernet0/0/2]ip address 192.168.2.254 24
[r2-GigabitEthernet0/0/2]int g0/0/1
[r2-GigabitEthernet0/0/1]ip add    
[r2-GigabitEthernet0/0/1]ip address 192.168.23.1 24
[r2-GigabitEthernet0/0/1]q
[r2]iprou    
[r2]ip rou    
[r2]ip route
[r2]ip route-static 192.168.1.0 24 192.168.12

路由r3配置

<Huawei>
<Huawei>u t m
Info: Current terminal monitor is off.
<Huawei>sy
Enter system view, return user view with Ctrl+Z.
[Huawei]sy r3
[r3]int g0/0/2
[r3-GigabitEthernet0/0/2]ip add    
[r3-GigabitEthernet0/0/2]ip address 192.168.3.254 24
[r3-GigabitEthernet0/0/2]int g0/0/0
[r3]int g0/0/0
[r3-GigabitEthernet0/0/0]ip add 192.168.23.2 24
[r3-GigabitEthernet0/0/0]
[r3]ip rou    
[r3]ip route
[r3]ip route-static 192.168.12.0 24 192.168.23.1
[r3]ip route-static 192.168.2.0 24 192.168.23.1
[r3]ip route-static 192.168.1.0 24 192.168.23.1

测试